$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft File: Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json) Hash identifier: hKTYghGrKaGyuethFlwIcJsUfwyXM9kro+tlcckc7YY= Subject key identifier: A0:3A:E1:CA:44:CE:B8:25:99:A4:CB:1A:0B:37:50:34:A7:EE:07:F6 Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft Manifest number: 01DB Signing time: Wed 23 Sep 2026 03:41:22 +0000 Manifest this update: Wed 23 Sep 2026 03:41:21 +0000 Manifest next update: Wed 30 Sep 2026 03:41:21 +0000 Files and hashes: 1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: Ar4BAq2tbuKYby4CCW7AJlR5iOqCZlMP9F79KLNjMe0=) 2: 89AB14CE9FB911F1AB1F7E9A5011F970.roa (hash: sZ8s23QzF9xaiemYlf1qe9fDFC4WJz5pdDudIXBJNNI=) 3: 890F7E749FB911F1AB1F7E9A5011F970.roa (hash: eYQw0SPhDmrk7SgtMJpBz4p1kI4NPWbyGxMaPtZFiZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Sep 23 03:41:21 2026 GMT Not After : Sep 30 03:41:21 2026 GMT Subject: CN=6ab34a62-118c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:ba:bf:e2:dd:09:c3:a5:ac:dc:72:cf:f0: 83:d7:c9:03:01:f5:8f:4c:35:19:19:5b:17:83:80: 5a:30:ab:ff:da:c6:64:e9:63:13:a5:b6:5b:e2:17: d6:c2:3c:10:0c:61:ea:ac:f0:7e:59:1b:24:06:67: fe:fb:30:72:ea:c8:e5:58:c8:4e:95:5b:6a:87:5d: 28:b4:be:60:85:06:ca:3f:26:07:e4:e8:dd:55:1a: 58:e8:19:8d:2d:05:c2:21:80:b5:71:c6:b5:86:90: a8:d0:8f:1c:b3:b9:67:fd:3a:47:cd:c2:9e:61:f0: 05:c6:4f:a6:f4:19:76:d3:ca:b7:fb:2d:bf:9a:b1: ea:8a:d5:e4:e3:ff:a1:96:af:7d:4c:8b:8b:9b:e0: 30:17:26:83:05:b0:99:22:c2:08:43:ec:ba:09:cb: 87:17:88:be:ae:fe:44:ea:63:9f:a0:9b:83:bd:0a: 4f:5c:72:77:9d:ba:5a:b8:d9:d0:e7:45:6e:8e:0c: 96:7f:52:0a:c4:b7:a3:08:25:14:75:f2:91:2a:44: 82:fb:f4:e5:c9:d7:c0:a7:2f:13:fe:ce:4c:53:5c: 5e:60:42:48:49:58:59:4e:fd:02:21:e6:ad:79:ae: 43:67:58:35:5c:e5:c7:70:16:12:74:0e:a1:77:58: af:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3A:E1:CA:44:CE:B8:25:99:A4:CB:1A:0B:37:50:34:A7:EE:07:F6 X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:df:d1:c9:e6:7e:2e:10:94:d9:1a:7c:e8:dc:60:d9:3d:28: d0:c5:ba:d5:a1:f7:72:ac:06:24:8e:4d:2a:4b:e7:52:e8:f4: 1f:fb:e7:3d:0e:0a:99:80:4b:52:66:c6:ec:d2:b4:80:06:50: b6:6e:ef:b6:49:49:07:0e:f6:f3:e0:93:b7:45:4d:c6:aa:61: 42:82:ef:88:2f:92:4f:5d:55:46:3c:1f:bc:a6:89:34:b7:e0: 56:4b:72:ef:33:f4:24:a3:db:70:ab:7f:69:a5:65:5e:ac:3a: f4:a1:73:ce:b8:3a:b2:69:ad:10:73:3e:5b:7a:02:41:4a:c1: d7:92:e0:67:e5:f8:75:6c:e8:c1:c6:f8:97:30:c4:0a:ff:6b: f2:92:dd:36:ca:cf:6f:b7:3d:65:5f:c0:19:30:c3:73:09:19: e5:35:3f:a0:e5:87:d0:2c:c1:70:5e:9c:c9:91:df:e2:e0:67: b3:9d:29:4a:0e:82:dd:2b:d7:5a:86:d3:3e:3f:73:16:61:d3: de:d6:52:68:62:0d:e3:02:a9:b8:bf:13:32:87:e6:3f:9e:dd: b7:35:3c:24:5b:97:11:62:bb:15:26:d8:9a:93:b6:37:5d:df: 8a:a6:ac:cf:f4:9d:ac:ff:b8:58:79:87:cd:65:b8:20:b8:76: 78:1a:0c:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKDJBQkEyQUEzQ0IzRjk0NTgxQzVEM0Q5MUJBMzZCOEE5 RDhFOERFQUQwHhcNMjYwOTIzMDM0MTIxWhcNMjYwOTMwMDM0MTIxWjAYMRYwFAYD VQQDEw02YWIzNGE2Mi0xMThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIa6v+LdCcOlrNxyz/CD18kDAfWPTDUZGVsXg4BaMKv/2sZk6WMTpbZb4hfW wjwQDGHqrPB+WRskBmf++zBy6sjlWMhOlVtqh10otL5ghQbKPyYH5OjdVRpY6BmN LQXCIYC1cca1hpCo0I8cs7ln/TpHzcKeYfAFxk+m9Bl208q3+y2/mrHqitXk4/+h lq99TIuLm+AwFyaDBbCZIsIIQ+y6CcuHF4i+rv5E6mOfoJuDvQpPXHJ3nbpauNnQ 50VujgyWf1IKxLejCCUUdfKRKkSC+/TlydfApy8T/s5MU1xeYEJISVhZTv0CIeat ea5DZ1g1XOXHcBYSdA6hd1iv+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKA64cpE zrglmaTLGgs3UDSn7gf2MB8GA1UdIwQYMBaAFCq6KqPLP5RYHF09kbo2uKnY6N6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi85ODNFNjE1MDE3 MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xGZ2NYVDJSdWphNHFkam8z cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi85ODNFNjE1MDE3MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xG Z2NYVDJSdWphNHFkam8zcTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqd/RyeZ+LhCU2Rp86Nxg2T0o0MW61aH3cqwGJI5NKkvnUuj0H/vnPQ4KmYBL UmbG7NK0gAZQtm7vtklJBw728+CTt0VNxqphQoLviC+ST11VRjwfvKaJNLfgVkty 7zP0JKPbcKt/aaVlXqw69KFzzrg6smmtEHM+W3oCQUrB15LgZ+X4dWzowcb4lzDE Cv9r8pLdNsrPb7c9ZV/AGTDDcwkZ5TU/oOWH0CzBcF6cyZHf4uBns50pSg6C3SvX WobTPj9zFmHT3tZSaGIN4wKpuL8TMofmP57dtzU8JFuXEWK7FSbYmpO2N13fiqas z/SdrP+4WHmHzWW4ILh2eBoMMg== -----END CERTIFICATE-----Generated at Thu Sep 24 11:08:09 2026 by rpki-client